Changes

26 bytes removed ,  18:24, 10 August 2009
m
Robot: Cosmetic changes
Line 47: Line 47:  
| Disc ID
 
| Disc ID
 
|  
 
|  
| [[Wiidisc_IDs]]
+
| [[Wiidisc IDs]]
 
|-
 
|-
 
| 0x001
 
| 0x001
Line 188: Line 188:  
|}
 
|}
   −
Each partition starts with a [[Ticket]] followed by the TMD followed by [[Certificate chain | three certifications]].
+
Each partition starts with a [[Ticket]] followed by the TMD followed by [[Certificate chain|three certifications]].
 
   
 
   
 
Offset 0x00000000 is considered as the start of the partition.
 
Offset 0x00000000 is considered as the start of the partition.
Line 316: Line 316:  
Finally, the global hash table ("H3"; which the partition header points to) contains the SHA-1 hash of the last table of each group in the partition. This table is not encrypted, but it is signed. To build it, take bytes 0x340-0x3DF from any sector in each group in the partition, apply SHA-1, and simply store all of the resulting hashes consecutively. All in all, each sector includes enough information to trace itself back to the master SHA-1 hash table. As a result, the entire partition is effectively signed. If anything is changed, the Wii will immediately crash (if the master hash table has been updated), or it will crash when it reads any sector in the modified group (if the group tables have been updated), any sector in the modified subgroup (if the subgroup tables have been updated), or any modified sector if no SHA-1s were updated.
 
Finally, the global hash table ("H3"; which the partition header points to) contains the SHA-1 hash of the last table of each group in the partition. This table is not encrypted, but it is signed. To build it, take bytes 0x340-0x3DF from any sector in each group in the partition, apply SHA-1, and simply store all of the resulting hashes consecutively. All in all, each sector includes enough information to trace itself back to the master SHA-1 hash table. As a result, the entire partition is effectively signed. If anything is changed, the Wii will immediately crash (if the master hash table has been updated), or it will crash when it reads any sector in the modified group (if the group tables have been updated), any sector in the modified subgroup (if the subgroup tables have been updated), or any modified sector if no SHA-1s were updated.
   −
The signature is stored in the [[Tmd_file_structure|TMD]]. The TMDs for the partition always have one content. The type of that content seems to be always 3, and the SHA1 hash is the SHA1 of the entire 0x18000 bytes of the hash table.
+
The signature is stored in the [[Tmd file structure|TMD]]. The TMDs for the partition always have one content. The type of that content seems to be always 3, and the SHA1 hash is the SHA1 of the entire 0x18000 bytes of the hash table.
The [[Tmd_file_structure|TMD]] is signed using Nintendo private key. That makes basically impossible to run modified discs. Trucha Signer uses the [[Signing_bug|signing bug]] to bypass the [[Tmd_file_structure|TMD]] signature checking, so the SHA1 hash of the master table can be updated, and modified discs can be booted.
+
The [[Tmd file structure|TMD]] is signed using Nintendo private key. That makes basically impossible to run modified discs. Trucha Signer uses the [[signing bug]] to bypass the [[Tmd file structure|TMD]] signature checking, so the SHA1 hash of the master table can be updated, and modified discs can be booted.
    
To decrypt the user data at 0x0400-0x7FFF, again use the partition key, but this time take the IV from bytes 0x3D0-0x3DF in the '''encrypted''' SHA-1 block.
 
To decrypt the user data at 0x0400-0x7FFF, again use the partition key, but this time take the IV from bytes 0x3D0-0x3DF in the '''encrypted''' SHA-1 block.
   −
==Known Wii discs==
+
== Known Wii discs ==
   −
On the [[Title_Database|Title Database]] you can find some info about different game discs
+
On the [[Title Database]] you can find some info about different game discs
    
== Methods to boot a disc ==
 
== Methods to boot a disc ==
Line 334: Line 334:     
The [[Wii BootMe]] tool (created by CorteX) lets you change the way wii images boot.
 
The [[Wii BootMe]] tool (created by CorteX) lets you change the way wii images boot.
 +
 
[[Category:Wii Software]]
 
[[Category:Wii Software]]
 
[[Category:File formats]]
 
[[Category:File formats]]
1,189

edits